CVE-2024-9674 Debrandify · Remove or Replace WordPress Branding <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

🗓️ 18 Oct 2024 11:55:02Reported by WordfenceType

CVE-2024-9674 Debrandify Plugin Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 5
Patchstack	WordPress Debrandify Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)	18 Oct 202400:00	–	patchstack
NVD	CVE-2024-9674	18 Oct 202411:15	–	nvd
Cvelist	CVE-2024-9674 Debrandify · Remove or Replace WordPress Branding <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	18 Oct 202411:02	–	cvelist
CVE	CVE-2024-9674	18 Oct 202411:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 14, 2024 to October 20, 2024)	24 Oct 202415:33	–	wordfence

Source	Link
wordpress	www.wordpress.org/plugins/debrandify/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a2110d13-d6d3-43f8-b1bf-8958d4f39ef5
plugins	www.plugins.trac.wordpress.org/changeset/3170586/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Oct 2024 11:02Current

6Medium risk

Vulners AI Score6

CVSS36.4

EPSS0.001

SSVC

CWE-79